Skip to content

Commit c7911a1

Browse files
gcf-owl-bot[bot]gcf-owl-bot[bot]
authored
docs: add warning against accepting untrusted credentials (#8039)
PiperOrigin-RevId: 719330114 Source-Link: googleapis/googleapis@9e0f143 Source-Link: googleapis/googleapis-gen@9612bdf Copy-Tag: eyJwIjoiQmlsbGluZy8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQmlsbGluZ0J1ZGdldHMvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQmluYXJ5QXV0aG9yaXphdGlvbi8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQnVpbGQvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQ2VydGlmaWNhdGVNYW5hZ2VyLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ2hhbm5lbC8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQ29tbWVyY2VDb25zdW1lclByb2N1cmVtZW50Ly5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ29tcHV0ZS8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiQ29uZmlkZW50aWFsQ29tcHV0aW5nLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ29uZmlnLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ29udGFjdENlbnRlckluc2lnaHRzLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ29udGFpbmVyLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiQ29udGFpbmVyQW5hbHlzaXMvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiQ29udHJvbHNQYXJ0bmVyLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiRGF0YUNhdGFsb2cvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiRGF0YUNhdGFsb2dMaW5lYWdlLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiRGF0YUZ1c2lvbi8uT3dsQm90LnlhbWwiLCJoIjoiOTYxMmJkZjg2Y2RiMWE4OTQ4NTk4MDZmMzM5NTgyOWYxY2JhNGYxYyJ9 Copy-Tag: eyJwIjoiRGF0YUxhYmVsaW5nLy5Pd2xCb3QueWFtbCIsImgiOiI5NjEyYmRmODZjZGIxYTg5NDg1OTgwNmYzMzk1ODI5ZjFjYmE0ZjFjIn0= Copy-Tag: eyJwIjoiRGF0YWZsb3cvLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ== Copy-Tag: eyJwIjoiRGF0YWZvcm0vLk93bEJvdC55YW1sIiwiaCI6Ijk2MTJiZGY4NmNkYjFhODk0ODU5ODA2ZjMzOTU4MjlmMWNiYTRmMWMifQ==
1 parent 02e95eb commit c7911a1

131 files changed

Lines changed: 786 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎Billing/src/V1/Client/CloudBillingClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -247,6 +247,12 @@ public static function parseName(string $formattedName, ?string $template = null
247247
* {@see \Google\Auth\FetchAuthTokenInterface} object or
248248
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
249249
* objects are provided, any settings in $credentialsConfig will be ignored.
250+
* *Important*: If you accept a credential configuration (credential
251+
* JSON/File/Stream) from an external source for authentication to Google Cloud
252+
* Platform, you must validate it before providing it to any Google API or library.
253+
* Providing an unvalidated credential configuration to Google APIs can compromise
254+
* the security of your systems and data. For more information {@see
255+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
250256
* @type array $credentialsConfig
251257
* Options used to configure credentials, including auth token caching, for the
252258
* client. For a full list of supporting configuration options, see

‎Billing/src/V1/Client/CloudCatalogClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,12 @@ public static function parseName(string $formattedName, ?string $template = null
160160
* {@see \Google\Auth\FetchAuthTokenInterface} object or
161161
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
162162
* objects are provided, any settings in $credentialsConfig will be ignored.
163+
* *Important*: If you accept a credential configuration (credential
164+
* JSON/File/Stream) from an external source for authentication to Google Cloud
165+
* Platform, you must validate it before providing it to any Google API or library.
166+
* Providing an unvalidated credential configuration to Google APIs can compromise
167+
* the security of your systems and data. For more information {@see
168+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
163169
* @type array $credentialsConfig
164170
* Options used to configure credentials, including auth token caching, for the
165171
* client. For a full list of supporting configuration options, see

‎BillingBudgets/src/V1/Client/BudgetServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -183,6 +183,12 @@ public static function parseName(string $formattedName, ?string $template = null
183183
* {@see \Google\Auth\FetchAuthTokenInterface} object or
184184
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
185185
* objects are provided, any settings in $credentialsConfig will be ignored.
186+
* *Important*: If you accept a credential configuration (credential
187+
* JSON/File/Stream) from an external source for authentication to Google Cloud
188+
* Platform, you must validate it before providing it to any Google API or library.
189+
* Providing an unvalidated credential configuration to Google APIs can compromise
190+
* the security of your systems and data. For more information {@see
191+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
186192
* @type array $credentialsConfig
187193
* Options used to configure credentials, including auth token caching, for the
188194
* client. For a full list of supporting configuration options, see

‎BinaryAuthorization/src/V1/Client/BinauthzManagementServiceV1Client.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -239,6 +239,12 @@ public static function parseName(string $formattedName, ?string $template = null
239239
* {@see \Google\Auth\FetchAuthTokenInterface} object or
240240
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
241241
* objects are provided, any settings in $credentialsConfig will be ignored.
242+
* *Important*: If you accept a credential configuration (credential
243+
* JSON/File/Stream) from an external source for authentication to Google Cloud
244+
* Platform, you must validate it before providing it to any Google API or library.
245+
* Providing an unvalidated credential configuration to Google APIs can compromise
246+
* the security of your systems and data. For more information {@see
247+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
242248
* @type array $credentialsConfig
243249
* Options used to configure credentials, including auth token caching, for the
244250
* client. For a full list of supporting configuration options, see

‎BinaryAuthorization/src/V1/Client/SystemPolicyV1Client.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -184,6 +184,12 @@ public static function parseName(string $formattedName, ?string $template = null
184184
* {@see \Google\Auth\FetchAuthTokenInterface} object or
185185
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
186186
* objects are provided, any settings in $credentialsConfig will be ignored.
187+
* *Important*: If you accept a credential configuration (credential
188+
* JSON/File/Stream) from an external source for authentication to Google Cloud
189+
* Platform, you must validate it before providing it to any Google API or library.
190+
* Providing an unvalidated credential configuration to Google APIs can compromise
191+
* the security of your systems and data. For more information {@see
192+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
187193
* @type array $credentialsConfig
188194
* Options used to configure credentials, including auth token caching, for the
189195
* client. For a full list of supporting configuration options, see

‎BinaryAuthorization/src/V1/Client/ValidationHelperV1Client.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,12 @@ private static function getClientDefaults()
106106
* {@see \Google\Auth\FetchAuthTokenInterface} object or
107107
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
108108
* objects are provided, any settings in $credentialsConfig will be ignored.
109+
* *Important*: If you accept a credential configuration (credential
110+
* JSON/File/Stream) from an external source for authentication to Google Cloud
111+
* Platform, you must validate it before providing it to any Google API or library.
112+
* Providing an unvalidated credential configuration to Google APIs can compromise
113+
* the security of your systems and data. For more information {@see
114+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
109115
* @type array $credentialsConfig
110116
* Options used to configure credentials, including auth token caching, for the
111117
* client. For a full list of supporting configuration options, see

‎Build/src/V2/Client/RepositoryManagerClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -336,6 +336,12 @@ public static function parseName(string $formattedName, ?string $template = null
336336
* {@see \Google\Auth\FetchAuthTokenInterface} object or
337337
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
338338
* objects are provided, any settings in $credentialsConfig will be ignored.
339+
* *Important*: If you accept a credential configuration (credential
340+
* JSON/File/Stream) from an external source for authentication to Google Cloud
341+
* Platform, you must validate it before providing it to any Google API or library.
342+
* Providing an unvalidated credential configuration to Google APIs can compromise
343+
* the security of your systems and data. For more information {@see
344+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
339345
* @type array $credentialsConfig
340346
* Options used to configure credentials, including auth token caching, for the
341347
* client. For a full list of supporting configuration options, see

‎CertificateManager/src/V1/Client/CertificateManagerClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -450,6 +450,12 @@ public static function parseName(string $formattedName, ?string $template = null
450450
* {@see \Google\Auth\FetchAuthTokenInterface} object or
451451
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
452452
* objects are provided, any settings in $credentialsConfig will be ignored.
453+
* *Important*: If you accept a credential configuration (credential
454+
* JSON/File/Stream) from an external source for authentication to Google Cloud
455+
* Platform, you must validate it before providing it to any Google API or library.
456+
* Providing an unvalidated credential configuration to Google APIs can compromise
457+
* the security of your systems and data. For more information {@see
458+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
453459
* @type array $credentialsConfig
454460
* Options used to configure credentials, including auth token caching, for the
455461
* client. For a full list of supporting configuration options, see

‎Channel/src/V1/Client/CloudChannelReportsServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -243,6 +243,12 @@ public static function parseName(string $formattedName, ?string $template = null
243243
* {@see \Google\Auth\FetchAuthTokenInterface} object or
244244
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
245245
* objects are provided, any settings in $credentialsConfig will be ignored.
246+
* *Important*: If you accept a credential configuration (credential
247+
* JSON/File/Stream) from an external source for authentication to Google Cloud
248+
* Platform, you must validate it before providing it to any Google API or library.
249+
* Providing an unvalidated credential configuration to Google APIs can compromise
250+
* the security of your systems and data. For more information {@see
251+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
246252
* @type array $credentialsConfig
247253
* Options used to configure credentials, including auth token caching, for the
248254
* client. For a full list of supporting configuration options, see

‎Channel/src/V1/Client/CloudChannelServiceClient.php‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -472,6 +472,12 @@ public static function parseName(string $formattedName, ?string $template = null
472472
* {@see \Google\Auth\FetchAuthTokenInterface} object or
473473
* {@see \Google\ApiCore\CredentialsWrapper} object. Note that when one of these
474474
* objects are provided, any settings in $credentialsConfig will be ignored.
475+
* *Important*: If you accept a credential configuration (credential
476+
* JSON/File/Stream) from an external source for authentication to Google Cloud
477+
* Platform, you must validate it before providing it to any Google API or library.
478+
* Providing an unvalidated credential configuration to Google APIs can compromise
479+
* the security of your systems and data. For more information {@see
480+
* https://cloud.google.com/docs/authentication/external/externally-sourced-credentials}
475481
* @type array $credentialsConfig
476482
* Options used to configure credentials, including auth token caching, for the
477483
* client. For a full list of supporting configuration options, see

0 commit comments

Comments
 (0)